pypi
5,093 tracked vulnerabilities.
CVE-2018-13390
MEDIUM
cloudtoken 0.1.1-0.1.23 - Unauthenticated AWS Credential Exposure via Network Daemon Access
Aug 10, 2018
CVSS 6.1
EPSS 0.00
CVE-2018-10931
CRITICAL
Cobbler 2.6.x - Privilege Escalation
Aug 09, 2018
CVSS 9.8
EPSS 0.68
CVE-2018-14574
MEDIUM
NUCLEI
Django <1.11.15, <2.0.8 - Open Redirect
Aug 03, 2018
CVSS 6.1
EPSS 0.25
CVE-2018-10903
HIGH
python-cryptography 1.9.0-2.2 - GCM Tag Forgery via Insufficient Tag Length Validation
Jul 30, 2018
CVSS 7.5
EPSS 0.03
CVE-2018-14523
HIGH
aubio < 0.4.7 - Out-of-bounds Read in pitchyinfft
Jul 23, 2018
CVSS 8.8
EPSS 0.02
CVE-2018-14522
HIGH
aubio < 0.4.7 - Denial of Service via Pitch Unit Setting
Jul 23, 2018
CVSS 8.8
EPSS 0.02
CVE-2018-14521
HIGH
aubio < 0.4.7 - Denial of Service via aubiomfcc
Jul 23, 2018
CVSS 8.8
EPSS 0.01
CVE-2018-14505
HIGH
mitmproxy < 4.0.4 - DNS Rebinding via mitmweb
Jul 22, 2018
CVSS 8.8
EPSS 0.03
CVE-2018-10875
HIGH
Ansible < 2.4.6.0 - Untrusted Search Path via ansible.cfg
Jul 13, 2018
CVSS 7.8
EPSS 0.01
CVE-2018-13796
MEDIUM
GNU Mailman < 2.1.28 - Cross-Site Scripting via Crafted URL
Jul 12, 2018
CVSS 6.5
EPSS 0.03
CVE-2018-1334
MEDIUM
Apache Spark 1.0.0-2.1.2, 2.2.0-2.2.1, 2.3.0 - Unauthorized User Impersonation via Local Connection
Jul 12, 2018
CVSS 4.7
EPSS 0.01
CVE-2018-10895
CRITICAL
qutebrowser < 1.4.1 - Cross-Site Request Forgery via qute:// URL Scheme
Jul 12, 2018
CVSS 9.3
EPSS 0.01
CVE-2018-13348
HIGH
Mercurial < 4.6.1 - Denial of Service via mpatch_decode Function
Jul 06, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-13347
CRITICAL
Mercurial < 4.6.1 - Integer Overflow in mpatch.c
Jul 06, 2018
CVSS 9.8
EPSS 0.03
CVE-2018-13346
HIGH
Mercurial < 4.6.1 - Denial of Service via mpatch_apply Fragment Start Validation
Jul 06, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-10855
MEDIUM
Ansible 2.4-2.4.4 and 2.5.0a1-2.5.4 - Sensitive Information Disclosure in Log Files
Jul 03, 2018
CVSS 5.9
EPSS 0.03
CVE-2018-10874
HIGH
Ansible < 2.4.6.0 - Unauthenticated Remote Code Execution via Inventory Variable Injection
Jul 02, 2018
CVSS 7.8
EPSS 0.00
CVE-2018-1000559
MEDIUM
qutebrowser 0.11.0-1.3.2 - Stored Cross-Site Scripting via History Page Title Attribute
Jun 26, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-1000523
HIGH
topydo <d4f843dac71308b2f29a7c2cdc76f055c3841523 - Code Injection
Jun 26, 2018
CVSS 8.1
EPSS 0.01
CVE-2018-1000519
MEDIUM
aio-libs aiohttp-session - Session Fixation
Jun 26, 2018
CVSS 6.5
EPSS 0.01
CVE-2018-1000518
HIGH
websockets 4.0-4.9 - Denial of Service via Compressed Frame Amplification
Jun 26, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-1000516
MEDIUM
Galaxy < 14.10.1 - Cross-Site Scripting via User Input in Templates
Jun 26, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-12104
MEDIUM
Airbnb Knowledge Repo < 0.9.0 - Stored Cross-Site Scripting via Post Comments
Jun 17, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-12423
HIGH
Synapse <0.31.2 - Privilege Escalation
Jun 14, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-10406
HIGH
Yelp OSXCollector < 1.10 - Improper Certificate Validation via Universal Binary Inspection
Jun 13, 2018
CVSS 7.8
EPSS 0.01
Products
tensorflow 427
tensorflow-gpu 421
tensorflow-cpu 417
Django 147
apache-airflow 128
open-webui 101
Plone 96
mlflow 77
apache-superset 67
salt 67
ansible 66
pillow 60
vllm 52
nova 49
gradio 48
matrix-synapse 44
pyload-ng 44
rdiffweb 43
keystone 40
vyper 39
moin 35
aiohttp 34
opencv-contrib-python 30
opencv-python 30
langflow 28
pypdf 28
PraisonAI 27
litellm 27
pgadmin4 26
openbabel 24
Quick Filters